Exam 1z0-908 All QuestionsBrowse all questions from this exam
Question 10

You wish to protect your MySQL database against SQL injection attacks.

Which method would fail to do this?

    Correct Answer: A

    Installing and configuring the Connection Control plugin does not directly prevent SQL injection attacks. This plugin is designed to limit the number of connection attempts from a host and to manage connection behavior but does not provide mechanisms to protect against SQL injection. The other methods mentioned, such as avoiding the concatenation of SQL statements and user-supplied values, using stored procedures, and utilizing prepared statements, are effective techniques to prevent SQL injection vulnerabilities.

Discussion
FelipeKOption: A

A. installing and configuring the Connection Control plugin. This plugin is used to limit the number of connection attempts from a host, but it does not directly prevent SQL injection attacks.

7206e44Option: A

A. Can be used for DDoS or limit number of connections, but not necessarily sql injection

rjafOption: A

Answer is A. Connection control plugin cannot protect against sql injection.

GalambGOption: D

The parameterized queries or prepared statements, which help prevent SQL injection vulnerabilities. Answer: D

eena96

But, the question asks which method would fail to to protect SQL injection attack

nkanike1Option: A

Answer is A. Connection control plugin cannot protect against sql injection.

marklvOption: A

which one does not work, A. Connection Control plugin has nothing to do with sql injection. The rest work.

DhanushkaOption: D

A prepared statement is a parameterized and reusable SQL query which forces the developer to write the SQL command and the user-provided data separately. The SQL command is executed safely, preventing SQL Injection vulnerabilities